You know what's really scary? Gmail is held up as the pinnacle of email security, but they let you reset your password by proving ownership of just a phone number!

So much for 2FA. So much for strong passwords. All I have to do is obtain your SSN, call up your cell phone provider and hijack your phone number, and initiate a password reset with Google. That gets me into your Gmail, which in turn gets me into all your other accounts.

Ridiculously easy. Google should be ashamed.